Solved

buffer overrun detected! program:\??\c:\windows\system32\winlogon.exe

Posted on 2009-04-14
7
4,020 Views
Last Modified: 2012-06-22
I get the error in the title

"Buffer overrun detected!

program:\??\c:\windows\system32\winlogon.exe

A buffer overrun has been detected which ahs corrupted the program's internal state. The program cannot safely continue execution and must now be terminated."

when starting windows, just before the ordinary log in screen would appear. I have the option to click okay, and then the system reboots.

I have pulled the drive and run a full chkdsk /r, no problems found. I have run three separate virus scans with no viruses found. Visual inspection makes windows look in tact and healthy. I tried a repair install and it did not change anything. I also tried a reimage that did not change anything. I can't boot into any version of windows (safe mode, directory services repair, etc)

Anybody have any idea about this error, or how to get rid of it?
0
Comment
Question by:zoogelsnof
7 Comments
 
LVL 26

Accepted Solution

by:
souseran earned 500 total points
ID: 24143445
Did you happen to have SUPERAntiSpyware on the affected drive? Can you run HiJackThis while the drive is slaved to another, and do you find an entry for *.superantispyware\SASWINLO.dll If so, can you rename the SASWINLO.dll file and does that allow you to log on to the drive?
0
 

Author Comment

by:zoogelsnof
ID: 24143866
That worked perfectly! How did you know?
0
 

Author Closing Comment

by:zoogelsnof
ID: 31570204
Perfect!
0
Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

 
LVL 26

Expert Comment

by:souseran
ID: 24143993
Glad to help. :-)

Q. How did you know?

A. LOL. Expert secret.

It appears you're running an older version of SUPERAntiSpyware. Now that the system is working again, you may want to uninstall it. I'd recommend Revo Uninstaller in Advanced Mode and clear out all the associated Files, Folders, and Registry entries. Be sure to check manually that all the old program files are gone. You can download Revo Uninstaller here:

http://www.revouninstaller.com/download/revosetup.exe

Then install the newest version of SUPERAntiSpyware. You can download it here:

http://downloads.superantispyware.com/downloads/SUPERAntiSpyware.exe

Be sure to update the data files.

0
 

Expert Comment

by:boatcomputer
ID: 24684926
Very impressed.
Again Microsoft don't give you a clue to the real problem.
Thanks again
0
 

Expert Comment

by:blxcomputers
ID: 25715974
AWESOME!! Thank you so much. I just wanted to add a comment to say thank you, and to post a work around option.

Here is what I had to do:
The answer posted above is 100% accurate.  I did not have a different drive to slave it from, so I booted using the "ultimate boot disk" CD. I then went into a "DOS" prompt. I naviagted from there to the progra~1\supera~1 directory. I pulled a dir/p and found my file! I then used the standard renaming procedure and renamed it SASWINLO.old  rebooted the machine....bang worked like a charm. Thanks again for your assistance! You saved me HOURS!!
0
 

Expert Comment

by:SocalScout
ID: 26049207
How are you able to run all those diagnostics? I have created boot disks, run Norton Antivirus from the CD,  and I still cannot access the command prompt or anything. It just takes me back to the logon where the above error occurrs.

Thanks


0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

It is only natural that we all want our PCs to be in good working order, improved system performance, so that is exactly how programs are advertised to entice. They say things like:            •      PC crashes? Get registry cleaner to repair it!    …
Issue: Unstable cursor in Windows XP and Windows runs extremely slow in that any click will bring up the Hour glass (sometimes for several seconds before giving you what you want) . Troubleshooting Process and the FINAL FIX: This issue see…
In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now